What is a good explanation of the DNS spoofing attack described in the material?

What is a good explanation of the DNS spoofing attack described in the material?

• A. The bank's website downloaded malware.
• B. Users typed the wrong URL and reached a phishing site.
• C. The DNS server blocked the bank's domain.
• D. Cyber criminals hacked into a DNS server and redirected the mapping for the banksrus.com domain name to an IP address they control.

Answer: (C)

DNS spoofing happens when attackers tamper with the DNS system so that a domain name resolves to an IP address they control instead of the legitimate server. In this attack, criminals gain access to a DNS server and change the mapping for the bank’s domain so that bank’s domain name points to an attacker’s IP. When users try to visit the bank, they are quietly taken to the attacker’s fake site, which can steal credentials or mislead users. This direct alteration of which IP a domain name points to is the essence of DNS spoofing. The other scenarios don’t describe dns spoofing. One option involves malware on the bank’s site, which isn’t about DNS mapping. Another describes users typing a wrong URL and ending up on a phishing page, which is phishing, not DNS spoofing. The last option describes the DNS server blocking the domain, which is a blocking or denial action, not spoofing the domain’s IP mapping.

DNS spoofing happens when attackers tamper with the DNS system so that a domain name resolves to an IP address they control instead of the legitimate server. In this attack, criminals gain access to a DNS server and change the mapping for the bank’s domain so that bank’s domain name points to an attacker’s IP. When users try to visit the bank, they are quietly taken to the attacker’s fake site, which can steal credentials or mislead users. This direct alteration of which IP a domain name points to is the essence of DNS spoofing.

The other scenarios don’t describe dns spoofing. One option involves malware on the bank’s site, which isn’t about DNS mapping. Another describes users typing a wrong URL and ending up on a phishing page, which is phishing, not DNS spoofing. The last option describes the DNS server blocking the domain, which is a blocking or denial action, not spoofing the domain’s IP mapping.